# cve.now: N8n-io

The newest entries naming N8n-io as an affected vendor (up to 200), of 206 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119557](https://cve.now/CVE-2026-119557.md): n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node (CVSS 8.2)
- [CVE-2026-119408](https://cve.now/CVE-2026-119408.md): n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes (CVSS 8.7)
- [CVE-2026-118679](https://cve.now/CVE-2026-118679.md): n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger (CVSS 6.9)
- [CVE-2026-118678](https://cve.now/CVE-2026-118678.md): n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction (CVSS 7.1)
- [CVE-2026-118677](https://cve.now/CVE-2026-118677.md): n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance (CVSS 5.9)
- [CVE-2026-118676](https://cve.now/CVE-2026-118676.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass (CVSS 5.1)
- [CVE-2026-118675](https://cve.now/CVE-2026-118675.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow (CVSS 5.1)
- [CVE-2026-118649](https://cve.now/CVE-2026-118649.md): n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables (CVSS 8.7)
- [CVE-2026-118648](https://cve.now/CVE-2026-118648.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy (CVSS 8.4)
- [CVE-2026-118647](https://cve.now/CVE-2026-118647.md): n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data (CVSS 5.3)
- [CVE-2026-118646](https://cve.now/CVE-2026-118646.md): n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node (CVSS 7.1)
- [CVE-2026-118645](https://cve.now/CVE-2026-118645.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter (CVSS 7.0)
- [CVE-2026-118644](https://cve.now/CVE-2026-118644.md): n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance (CVSS 5.1)
- [CVE-2026-118643](https://cve.now/CVE-2026-118643.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data (CVSS 5.3)
- [CVE-2026-118642](https://cve.now/CVE-2026-118642.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows (CVSS 5.1)
- [CVE-2026-118641](https://cve.now/CVE-2026-118641.md): n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes (CVSS 6.9)
- [CVE-2026-118640](https://cve.now/CVE-2026-118640.md): n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass (CVSS 5.3)
- [CVE-2026-110853](https://cve.now/CVE-2026-110853.md): n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON (CVSS 7.1)
- [CVE-2026-110852](https://cve.now/CVE-2026-110852.md): n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution (CVSS 6.3)
- [CVE-2026-110851](https://cve.now/CVE-2026-110851.md): n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint (CVSS 6.1)
- [CVE-2026-110850](https://cve.now/CVE-2026-110850.md): n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters (CVSS 7.2)
- [CVE-2026-110849](https://cve.now/CVE-2026-110849.md): n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview (CVSS 7.2)
- [CVE-2026-110848](https://cve.now/CVE-2026-110848.md): n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge (CVSS 6.0)
- [CVE-2026-110847](https://cve.now/CVE-2026-110847.md): n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter (CVSS 7.0)
- [CVE-2026-110846](https://cve.now/CVE-2026-110846.md): n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook (CVSS 7.0)
- [CVE-2026-110845](https://cve.now/CVE-2026-110845.md): n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation (CVSS 7.7)
- [CVE-2026-110844](https://cve.now/CVE-2026-110844.md): n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows (CVSS 7.2)
- [CVE-2026-110843](https://cve.now/CVE-2026-110843.md): n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint (CVSS 8.2)
- [CVE-2026-110842](https://cve.now/CVE-2026-110842.md): n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter (CVSS 7.7)
- [CVE-2026-110841](https://cve.now/CVE-2026-110841.md): n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval (CVSS 6.1)
- [CVE-2026-110840](https://cve.now/CVE-2026-110840.md): n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field (CVSS 7.0)
- [CVE-2026-103260](https://cve.now/CVE-2026-103260.md): n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node (CVSS 6.3)
- [CVE-2026-103259](https://cve.now/CVE-2026-103259.md): n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials (CVSS 8.5)
- [CVE-2026-103258](https://cve.now/CVE-2026-103258.md): n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation (CVSS 6.9)
- [CVE-2026-103257](https://cve.now/CVE-2026-103257.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node (CVSS 8.1)
- [CVE-2026-103256](https://cve.now/CVE-2026-103256.md): n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook (CVSS 7.1)
- [CVE-2026-103255](https://cve.now/CVE-2026-103255.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase (CVSS 7.1)
- [CVE-2026-103254](https://cve.now/CVE-2026-103254.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation (CVSS 7.0)
- [CVE-2026-103253](https://cve.now/CVE-2026-103253.md): n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table (CVSS 7.0)
- [CVE-2026-103252](https://cve.now/CVE-2026-103252.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint (CVSS 7.1)
- [CVE-2026-103251](https://cve.now/CVE-2026-103251.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub (CVSS 7.5)
- [CVE-2026-103250](https://cve.now/CVE-2026-103250.md): n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory (CVSS 7.0)
- [CVE-2026-103249](https://cve.now/CVE-2026-103249.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator (CVSS 6.9)
- [CVE-2026-103248](https://cve.now/CVE-2026-103248.md): n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase (CVSS 7.1)
- [CVE-2026-103247](https://cve.now/CVE-2026-103247.md): n8n before 1.123.80 Credential Tampering via Duplicate Node IDs (CVSS 5.8)
- [CVE-2026-103246](https://cve.now/CVE-2026-103246.md): n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection (CVSS 8.3)
- [CVE-2026-103245](https://cve.now/CVE-2026-103245.md): n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification (CVSS 6.9)
- [CVE-2026-92588](https://cve.now/CVE-2026-92588.md): n8n before 1.123.76 Improper Authorization via Source Control Push (CVSS 5.9)
- [CVE-2026-92587](https://cve.now/CVE-2026-92587.md): n8n before 1.123.76 Sandbox Escape via Git Relative URL (CVSS 5.3)
- [CVE-2026-86075](https://cve.now/CVE-2026-86075.md): n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint (CVSS 8.7)
- [CVE-2026-86076](https://cve.now/CVE-2026-86076.md): n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution (CVSS 8.7)
- [CVE-2026-86077](https://cve.now/CVE-2026-86077.md): n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket (CVSS 6.3)
- [CVE-2026-86078](https://cve.now/CVE-2026-86078.md): n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service (CVSS 6.0)
- [CVE-2026-86079](https://cve.now/CVE-2026-86079.md): n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers (CVSS 6.3)
- [CVE-2026-86080](https://cve.now/CVE-2026-86080.md): n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open (CVSS 6.3)
- [CVE-2026-86081](https://cve.now/CVE-2026-86081.md): n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path (CVSS 7.1)
- [CVE-2026-86082](https://cve.now/CVE-2026-86082.md): n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node (CVSS 7.1)
- [CVE-2026-86083](https://cve.now/CVE-2026-86083.md): n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution (CVSS 7.7)
- [CVE-2026-86084](https://cve.now/CVE-2026-86084.md): n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions (CVSS 6.0)
- [CVE-2026-86085](https://cve.now/CVE-2026-86085.md): n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints (CVSS 5.1)
- [CVE-2026-86993](https://cve.now/CVE-2026-86993.md): n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check (CVSS 5.9)
- [CVE-2026-86994](https://cve.now/CVE-2026-86994.md): n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter (CVSS 5.3)
- [CVE-2026-86995](https://cve.now/CVE-2026-86995.md): n8n: Git Node branch.\<name\>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read (CVSS 5.3)
- [CVE-2026-86996](https://cve.now/CVE-2026-86996.md): n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy (CVSS 5.3)
- [CVE-2026-86074](https://cve.now/CVE-2026-86074.md): n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content (CVSS 5.9)
- [CVE-2026-86073](https://cve.now/CVE-2026-86073.md): n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution (CVSS 5.9)
- [CVE-2026-85173](https://cve.now/CVE-2026-85173.md): n8n before 2.36.2 Missing Authorization via Insights API (CVSS 5.3)
- [CVE-2026-85172](https://cve.now/CVE-2026-85172.md): n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass (CVSS 5.3)
- [CVE-2026-85171](https://cve.now/CVE-2026-85171.md): n8n before 1.123.73 Credential Exposure via Error Logging (CVSS 7.1)
- [CVE-2026-85170](https://cve.now/CVE-2026-85170.md): n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes (CVSS 7.1)
- [CVE-2026-85169](https://cve.now/CVE-2026-85169.md): n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak (CVSS 8.7)
- [CVE-2026-85168](https://cve.now/CVE-2026-85168.md): n8n before 1.123.73 Remote Code Execution via Git Node (CVSS 7.7)
- [CVE-2026-85167](https://cve.now/CVE-2026-85167.md): n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes (CVSS 6.3)
- [CVE-2026-85166](https://cve.now/CVE-2026-85166.md): n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node (CVSS 7.2)
- [CVE-2026-85165](https://cve.now/CVE-2026-85165.md): n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement (CVSS 7.2)
- [CVE-2026-77085](https://cve.now/CVE-2026-77085.md): n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool (CVSS 6.3)
- [CVE-2026-77084](https://cve.now/CVE-2026-77084.md): n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values (CVSS 7.7)
- [CVE-2026-77083](https://cve.now/CVE-2026-77083.md): n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution (CVSS 6.0)
- [CVE-2026-77082](https://cve.now/CVE-2026-77082.md): n8n before 1.123.69 ReDoS via Filter and Switch Node (CVSS 5.3)
- [CVE-2026-77081](https://cve.now/CVE-2026-77081.md): n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node (CVSS 5.1)
- [CVE-2026-77080](https://cve.now/CVE-2026-77080.md): n8n before 1.123.69 Arbitrary File Read and Write via Snowflake (CVSS 8.7)
- [CVE-2026-77079](https://cve.now/CVE-2026-77079.md): n8n before 2.34.1 Authorization Bypass via Custom Role Deletion (CVSS 7.4)
- [CVE-2026-77077](https://cve.now/CVE-2026-77077.md): n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution (CVSS 7.2)
- [CVE-2026-77076](https://cve.now/CVE-2026-77076.md): n8n before 1.123.69 Credential Leak via GraphQL Node Error (CVSS 7.1)
- [CVE-2026-77075](https://cve.now/CVE-2026-77075.md): n8n before 1.123.69 Expression Injection via Resource Locator (CVSS 8.4)
- [CVE-2026-77074](https://cve.now/CVE-2026-77074.md): n8n before 1.123.69 SSRF via Edit Image Node (CVSS 6.0)
- [CVE-2026-77073](https://cve.now/CVE-2026-77073.md): n8n before 2.34.1 Cross-Project Credential Access via MCP (CVSS 5.3)
- [CVE-2026-77072](https://cve.now/CVE-2026-77072.md): n8n before 1.123.69 Stored XSS via Form Completion Page (CVSS 8.4)
- [CVE-2026-77071](https://cve.now/CVE-2026-77071.md): n8n before 1.123.69 PostgREST Filter Injection via Supabase (CVSS 7.1)
- [CVE-2026-77070](https://cve.now/CVE-2026-77070.md): n8n before 1.123.69 NoSQL Injection via MongoDB Node (CVSS 7.1)
- [CVE-2026-77069](https://cve.now/CVE-2026-77069.md): n8n before 1.123.69 SSRF Protection Bypass via OAuth2 (CVSS 2.3)
- [CVE-2026-77068](https://cve.now/CVE-2026-77068.md): n8n before 2.34.1 Remote Code Execution via Path Traversal (CVSS 8.7)
- [CVE-2026-71539](https://cve.now/CVE-2026-71539.md): n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution (CVSS 8.9)
- [CVE-2026-72775](https://cve.now/CVE-2026-72775.md): n8n before 1.123.67 SQL Injection via PostgresTrigger Node (CVSS 5.8)
- [CVE-2026-72774](https://cve.now/CVE-2026-72774.md): n8n before 1.123.67 Authentication Bypass via HTTP Request Node (CVSS 7.1)
- [CVE-2026-72773](https://cve.now/CVE-2026-72773.md): n8n before 2.32.1 Path Traversal via computer-use search\_files (CVSS 4.9)
- [CVE-2026-72772](https://cve.now/CVE-2026-72772.md): n8n before 2.32.1 Authentication Bypass via Token Exchange (CVSS 8.9)
- [CVE-2026-72771](https://cve.now/CVE-2026-72771.md): n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes (CVSS 7.1)
- [CVE-2026-72770](https://cve.now/CVE-2026-72770.md): n8n before 1.123.67 Path Traversal via Git Node Operations (CVSS 7.1)
- [CVE-2026-72769](https://cve.now/CVE-2026-72769.md): n8n before 1.123.67 Prototype Pollution via VM Expression Engine (CVSS 6.1)
- [CVE-2026-72768](https://cve.now/CVE-2026-72768.md): n8n before 2.32.1 SSRF Protection Bypass via MCP Client (CVSS 6.4)
- [CVE-2026-72767](https://cve.now/CVE-2026-72767.md): n8n before 1.123.67 Remote Code Execution via Git node (CVSS 8.7)
- [CVE-2026-72766](https://cve.now/CVE-2026-72766.md): n8n before 1.123.67 Arbitrary File Read via Send Email Node (CVSS 8.2)
- [CVE-2026-72765](https://cve.now/CVE-2026-72765.md): n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape (CVSS 8.7)
- [CVE-2026-72764](https://cve.now/CVE-2026-72764.md): n8n before 1.123.67 Module Cache Poisoning via Code Node (CVSS 5.8)
- [CVE-2026-72763](https://cve.now/CVE-2026-72763.md): n8n before 1.123.67 Credential Exfiltration via Sub-Workflow (CVSS 7.2)
- [CVE-2026-72762](https://cve.now/CVE-2026-72762.md): n8n before 1.123.67 Arbitrary File Write via Edit Image Node (CVSS 7.7)
- [CVE-2026-72750](https://cve.now/CVE-2026-72750.md): n8n before 1.123.67 SQL Injection via executeQuery Operation (CVSS 5.3)
- [CVE-2026-72749](https://cve.now/CVE-2026-72749.md): n8n before 1.123.67 Prototype Pollution via Edit Fields (CVSS 7.1)
- [CVE-2026-65599](https://cve.now/CVE-2026-65599.md): n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header (CVSS 5.1)
- [CVE-2026-65598](https://cve.now/CVE-2026-65598.md): n8n before 1.123.64 Remote Code Execution via Git Clone (CVSS 8.9)
- [CVE-2026-65597](https://cve.now/CVE-2026-65597.md): n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe (CVSS 8.2)
- [CVE-2026-65596](https://cve.now/CVE-2026-65596.md): n8n before 1.123.64 Credential Exfiltration via GraphQL Node (CVSS 5.1)
- [CVE-2026-65595](https://cve.now/CVE-2026-65595.md): n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange (CVSS 8.9)
- [CVE-2026-65594](https://cve.now/CVE-2026-65594.md): n8n before 2.30.1 Missing OAuth Authorization Check (CVSS 5.1)
- [CVE-2026-65593](https://cve.now/CVE-2026-65593.md): n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters (CVSS 6.3)
- [CVE-2026-65592](https://cve.now/CVE-2026-65592.md): n8n before 1.123.64 Stored DOM XSS via cachedResultUrl (CVSS 8.4)
- [CVE-2026-65591](https://cve.now/CVE-2026-65591.md): n8n before 1.123.64 Sanitizer Bypass Remote Code Execution (CVSS 8.9)
- [CVE-2026-65590](https://cve.now/CVE-2026-65590.md): n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows (CVSS 5.5)
- [CVE-2026-65589](https://cve.now/CVE-2026-65589.md): n8n before 1.123.64 Credential Exposure via LLM Node Execution Data (CVSS 5.1)
- [CVE-2026-65016](https://cve.now/CVE-2026-65016.md): n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role (CVSS 7.7)
- [CVE-2026-65015](https://cve.now/CVE-2026-65015.md): n8n before 2.30.1 Privilege Escalation via run\_node\_tool (CVSS 7.2)
- [CVE-2026-65014](https://cve.now/CVE-2026-65014.md): n8n before 2.28.0 Authentication Bypass via test-webhook (CVSS 6.3)
- [CVE-2026-59209](https://cve.now/CVE-2026-59209.md): n8n: Shared Credential Header Leak via HTTP Request Pagination Expression (CVSS 7.1)
- [CVE-2026-59206](https://cve.now/CVE-2026-59206.md): n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration (CVSS 7.1)
- [CVE-2026-59208](https://cve.now/CVE-2026-59208.md): n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution (CVSS 7.6)
- [CVE-2026-59207](https://cve.now/CVE-2026-59207.md): n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector (CVSS 7.1)
- [CVE-2026-44792](https://cve.now/CVE-2026-44792.md): n8n: Source Control Pull SQL Injection (CVSS 8.9)
- [CVE-2026-44791](https://cve.now/CVE-2026-44791.md): n8n: XML Node Prototype Pollution Patch Bypass (CVSS 9.4)
- [CVE-2026-44790](https://cve.now/CVE-2026-44790.md): n8n: Arbitrary File Read via Git Node (CVSS 9.4)
- [CVE-2026-44789](https://cve.now/CVE-2026-44789.md): n8n: HTTP Request Node Pagination Prototype Pollution to RCE (CVSS 9.4)
- [CVE-2026-45732](https://cve.now/CVE-2026-45732.md): n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints (CVSS 8.3)
- [CVE-2026-49444](https://cve.now/CVE-2026-49444.md): n8n: Python sandbox escape (CVSS 7.1)
- [CVE-2026-49465](https://cve.now/CVE-2026-49465.md): n8n: Git Node Clone and Push Operations Bypass File Sandbox (CVSS 6.0)
- [CVE-2026-54304](https://cve.now/CVE-2026-54304.md): n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host (CVSS 7.1)
- [CVE-2026-54307](https://cve.now/CVE-2026-54307.md): n8n: Credential Exfiltration via Permission Bypass (CVSS 8.5)
- [CVE-2026-54302](https://cve.now/CVE-2026-54302.md): n8n: Stored XSS in Chat Trigger Node (CVSS 7.0)
- [CVE-2026-54305](https://cve.now/CVE-2026-54305.md): n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints (CVSS 8.9)
- [CVE-2026-54301](https://cve.now/CVE-2026-54301.md): n8n: Same-Origin XSS in Respond to Webhook Node (CVSS 7.0)
- [CVE-2026-54306](https://cve.now/CVE-2026-54306.md): n8n: Prototype Pollution enables confused-deputy execution via public webhooks (CVSS 6.3)
- [CVE-2026-54308](https://cve.now/CVE-2026-54308.md): n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node (CVSS 6.3)
- [CVE-2026-54311](https://cve.now/CVE-2026-54311.md): n8n: Merge Node SQL Mode Prototype Pollution (CVSS 6.0)
- [CVE-2026-54310](https://cve.now/CVE-2026-54310.md): n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes (CVSS 6.5)
- [CVE-2026-54309](https://cve.now/CVE-2026-54309.md): n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions (CVSS 8.8)
- [CVE-2026-54314](https://cve.now/CVE-2026-54314.md): n8n: Denial of Service via ZIP decompression in webhook workflow (CVSS 6.3)
- [CVE-2026-54312](https://cve.now/CVE-2026-54312.md): n8n: Microsoft SQL Node Prototype Pollution (CVSS 7.2)
- [CVE-2026-54303](https://cve.now/CVE-2026-54303.md): n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints (CVSS 6.8)
- [CVE-2026-54313](https://cve.now/CVE-2026-54313.md): n8n: NoSQL Injection in MongoDB Node Find And Replace Operation (CVSS 6.5)
- [CVE-2026-42237](https://cve.now/CVE-2026-42237.md): n8n: SQL Injection in Snowflake and MySQL Nodes (CVSS 5.3)
- [CVE-2026-42236](https://cve.now/CVE-2026-42236.md): n8n: Unauthenticated Denial of Service via MCP Client Registration (CVSS 8.7)
- [CVE-2026-42235](https://cve.now/CVE-2026-42235.md): n8n: XSS via MCP OAuth client (CVSS 8.8)
- [CVE-2026-42234](https://cve.now/CVE-2026-42234.md): n8n: Python Task Runner Sandbox Escape (CVSS 7.1)
- [CVE-2026-42233](https://cve.now/CVE-2026-42233.md): n8n: SQL Injection in Oracle Database Node via Limit Field (CVSS 5.3)
- [CVE-2026-42232](https://cve.now/CVE-2026-42232.md): n8n: XML Node Prototype Pollution to RCE (CVSS 9.4)
- [CVE-2026-42231](https://cve.now/CVE-2026-42231.md): n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE (CVSS 9.4)
- [CVE-2026-42230](https://cve.now/CVE-2026-42230.md): n8n: Open Redirect in MCP OAuth Consent Flow (CVSS 5.1)
- [CVE-2026-42229](https://cve.now/CVE-2026-42229.md): n8n: SQL Injection in SeaTable Node (CVSS 5.3)
- [CVE-2026-42228](https://cve.now/CVE-2026-42228.md): n8n: Hijacking of Unauthenticated Chat Execution (CVSS 6.3)
- [CVE-2026-42227](https://cve.now/CVE-2026-42227.md): n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure (CVSS 6.0)
- [CVE-2026-42226](https://cve.now/CVE-2026-42226.md): n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay (CVSS 7.1)
- [CVE-2026-33751](https://cve.now/CVE-2026-33751.md): n8n Vulnerable to LDAP Filter Injection in LDAP Node (CVSS 6.3)
- [CVE-2026-33749](https://cve.now/CVE-2026-33749.md): n8n Vulnerable to XSS via Binary Data Inline HTML Rendering (CVSS 6.3)
- [CVE-2026-33724](https://cve.now/CVE-2026-33724.md): n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no (CVSS 6.3)
- [CVE-2026-33722](https://cve.now/CVE-2026-33722.md): n8n Has External Secrets Authorization Bypass in Credential Saving (CVSS 7.3)
- [CVE-2026-33720](https://cve.now/CVE-2026-33720.md): n8n Has Authorization Bypass in OAuth Callback via N8N\_SKIP\_AUTH\_ON\_OAUTH\_CALLBACK (CVSS 6.3)
- [CVE-2026-33713](https://cve.now/CVE-2026-33713.md): n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression (CVSS 8.7)
- [CVE-2026-33696](https://cve.now/CVE-2026-33696.md): n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE (CVSS 9.4)
- [CVE-2026-33665](https://cve.now/CVE-2026-33665.md): n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover (CVSS 8.8)
- [CVE-2026-33663](https://cve.now/CVE-2026-33663.md): n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition (CVSS 8.5)
- [CVE-2026-33660](https://cve.now/CVE-2026-33660.md): n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode (CVSS 9.4)
- [CVE-2026-27496](https://cve.now/CVE-2026-27496.md): n8n has In-Process Memory Disclosure in its Task Runner (CVSS 7.1)
- [CVE-2026-27498](https://cve.now/CVE-2026-27498.md): n8n has Arbitrary Command Execution via File Write and Git Operations (CVSS 9.0)
- [CVE-2026-27578](https://cve.now/CVE-2026-27578.md): n8n Vulnerable to Stored XSS via Various Nodes (CVSS 8.5)
- [CVE-2026-27577](https://cve.now/CVE-2026-27577.md): n8n: Expression Sandbox Escape Leads to RCE (CVSS 9.4)
- [CVE-2026-27497](https://cve.now/CVE-2026-27497.md): n8n has Potential Remote Code Execution via Merge Node (CVSS 9.4)
- [CVE-2026-27495](https://cve.now/CVE-2026-27495.md): n8n has a Sandbox Escape in its JavaScript Task Runner (CVSS 9.4)
- [CVE-2026-27494](https://cve.now/CVE-2026-27494.md): n8n has Arbitrary File Read via Python Code Node Sandbox Escape (CVSS 7.1)
- [CVE-2026-27493](https://cve.now/CVE-2026-27493.md): n8n has Unauthenticated Expression Evaluation via Form Node (CVSS 9.5)
- [CVE-2026-25631](https://cve.now/CVE-2026-25631.md): Domain allowlist bypass enables credential exfiltration (CVSS 5.3)
- [CVE-2026-21893](https://cve.now/CVE-2026-21893.md): n8n Vulnerable to Command Injection in Community Package Installation (CVSS 9.4)
- [CVE-2026-25115](https://cve.now/CVE-2026-25115.md): n8n is vulnerable to Python sandbox escape (CVSS 9.4)
- [CVE-2026-25056](https://cve.now/CVE-2026-25056.md): n8n Arbitrary File Write leading to RCE in n8n Merge Node (CVSS 9.4)
- [CVE-2026-25055](https://cve.now/CVE-2026-25055.md): n8n Arbitrary File Write on Remote Systems via SSH Node (CVSS 7.1)
- [CVE-2026-25054](https://cve.now/CVE-2026-25054.md): n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI (CVSS 8.5)
- [CVE-2026-25053](https://cve.now/CVE-2026-25053.md): n8n is Vulnerable to OS Command Injection in Git Node (CVSS 9.4)
- [CVE-2026-25052](https://cve.now/CVE-2026-25052.md): n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users (CVSS 9.4)
- [CVE-2026-25051](https://cve.now/CVE-2026-25051.md): n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS (CVSS 8.5)
- [CVE-2025-61917](https://cve.now/CVE-2025-61917.md): n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner (CVSS 7.7)
- [CVE-2026-25049](https://cve.now/CVE-2026-25049.md): n8n Has an Expression Escape Vulnerability Leading to RCE (CVSS 9.4)
- [CVE-2025-68949](https://cve.now/CVE-2025-68949.md): n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching (CVSS 5.3)
- [CVE-2026-21894](https://cve.now/CVE-2026-21894.md): n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks (CVSS 6.5)
- [CVE-2026-21877](https://cve.now/CVE-2026-21877.md): n8n is vulnerable to Remote Code Execution via Arbitrary File Write (CVSS 10.0)
- [CVE-2026-21858](https://cve.now/CVE-2026-21858.md): n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling (CVSS 10.0)
- [CVE-2025-68697](https://cve.now/CVE-2025-68697.md): Self-hosted n8n has Legacy Code node that enables arbitrary file read/write (CVSS 7.1)
- [CVE-2025-68668](https://cve.now/CVE-2025-68668.md): n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node (CVSS 9.9)
- [CVE-2025-61914](https://cve.now/CVE-2025-61914.md): n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox (CVSS 7.3)
- [CVE-2025-68613](https://cve.now/CVE-2025-68613.md): n8n Vulnerable to Remote Code Execution via Expression Injection (CVSS 10.0, KEV)
- [CVE-2025-65964](https://cve.now/CVE-2025-65964.md): n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook (CVSS 9.4)
- [CVE-2025-62726](https://cve.now/CVE-2025-62726.md): n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook (CVSS 8.8)
- [CVE-2025-58177](https://cve.now/CVE-2025-58177.md): n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter (CVSS 5.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/n8n-io
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.